RE: [EXTERNAL] Re: Detect who ran DROP schema

["Wetmore, Matthew (CTR)" <Matthew.Wetmore@xxxxxxxxxxxxx>]

This is a major issue in the DBA world as enterprise management lawyers get more popular.

At a large company I was at, there was only one elevated user, (which several people had user/pass) and then our personal accounts cannot do much due to modern corporate governance.  This is how it was set up.

 

As the DBA I couldn’t even log into the linux box where postgres was installed.

 

I couldn’t even change any logging without a two day ticket to do the work.

 

Not specifically this issue, but this is more the norm now-a-days then not.

 

 

From: David G. Johnston <david.g.johnston@xxxxxxxxx>
Sent: Wednesday, July 24, 2024 6:33 AM
To: Siraj G <tosiraj.g@xxxxxxxxx>
Cc: sagar jadhav <sagarjdhv5@xxxxxxxxx>; Wasim Devale <wasimd60@xxxxxxxxx>; Kashif Zeeshan <kashi.zeeshan@xxxxxxxxx>; Muhammad Imtiaz <imtiazpg712@xxxxxxxxx>; Pgsql-admin <pgsql-admin@xxxxxxxxxxxxxxxxxxxx>
Subject: [EXTERNAL] Re: Detect who ran DROP schema

 

On Wednesday, July 24, 2024, Siraj G <tosiraj.g@xxxxxxxxx> wrote:

 

PgSQL instance is a cloud SQL managed by GCP. I used the GCP observability tab to get the log, but I guess more logging is required to get more granular details.

 

Pretty sure you are sunk if you allow multiple people to connect over IP as the same user.  Though you might be able to locate a client IP address somewhere.

 

Be glad it was UAT and that you can learn from your mistakes with minimal damage.  Enable better logging and require personal login credentials.

 

David J.

 

---

CONFIDENTIALITY NOTICE: If you have received this email in error, please immediately notify the sender by e-mail at the address shown. This email transmission may contain confidential information. This information is intended only for the use of the individual(s) or entity to whom it is intended even if addressed incorrectly. Please delete it from your files if you are not the intended recipient. Thank you for your compliance. Copyright (c) 2024 Evernorth